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AMENDMENTS TO THE CLAIMS 

This listing of the claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims 

Claims 1-8 (Canceled). 

9. (Previously Presented) A method for establishing a secret to authenticate a user 
comprising the steps of receiving a secret pattern on a graphical interface, wherein the secret 
pattern comprises a sequence of discrete graphical choices; 

converting each discrete graphical choice in the sequence of discrete graphical choices 
into a value to produce a sequence of values, wherein the sequence of values corresponds to the 
sequence of discrete graphical choices; 

for the sequence of values selecting codewords from a plurality of codewords to generate 
a sequence of codewords, the plurality of codewords b e ing associat e d with defining an error- 
correcting code; 

calculating an offset between each value in the sequence of values and the corresponding 
codeword in the sequence of codewords to generate a sequence of offsets; and 

hashing the sequence of codewords to produce a hash of the sequence of codewords. 

10. (Original) The method of claim 9 wherein a discrete graphical choice in the 
sequence of discrete graphical choices comprises a selected point on the graphical interface. 

1 1 . (Previously Presented) The method of claim 10 further comprising displaying an 
image on the graphical interface after receiving the selected point on the graphical interface, 
wherein each discrete graphical choice in the sequence of discrete graphical choices is associated 
with one of a plurality of images. 

12. (Original) The method of claim 1 1 further comprising prompting a user by 
displaying one of the plurality of images on the graphical interface; and receiving a match 
pattern on the graphical interface for comparison with the secret pattern, wherein the match 
pattern comprises a sequence of match points. 
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13. (Previously Presented) The method of claim 12 further comprising, during or after 
receiving the match pattern on the graphical interface, displaying the selected point associated 
with the image on the graphical interface. 

14. (Previously Presented) The method of claim 13 further comprising, during or after 
receiving the match pattern on the graphical interface, displaying a line from a match point to the 
selected point associated with the image on the graphical interface. 

15. (Original) The method of claim 10 further comprising providing at least one 
memory cue by presenting the at least one memory cue in response to a point on the image on 
the graphical interface being highlighted. 

16. (Original) The method of claim 15 further comprising associating a first icon from a 
plurality of icons with a first point on the image on the graphical interface by displaying the first 
icon in response to the first point being highlighted; and associating a second icon from the 
plurality of icons with a second point on the image on the graphical interface by displaying the 
second icon in response to the second point being highlighted. 

17. (Original) The method of claim 10 further comprising highlighting, for each discrete 
graphical choice in the sequence of discrete graphical choices, a plurality of points on the 
graphical interface as alternative graphical choices. 

1 8. (Original) The method of claim 9 further comprising storing the sequence of offsets 
for use in authenticating a user. 

19. (Original) The method of claim 9 further comprising storing the hash of the 
sequence of codewords for use in authenticating a user. 

20. (Previously Presented) A method for authenticating a user comprising the steps of 
receiving an input pattern on a graphical interface, wherein the input pattern comprises a 

sequence of discrete graphical choices; 

converting each discrete graphical choice in the sequence of discrete graphical choices 
into an input value to produce a sequence of input values, wherein the sequence of input values 
corresponds to the sequence of discrete graphical choices; 
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retrieving a sequence of offsets; 

summing each input value from the sequence of input values with the corresponding 
offset from the sequence of offsets to generate a sequence of intermediate values; 

for the sequence of intermediate values selecting codewords from a plurality of 
codewords to generate a sequence of codewords, the plurality of codewords b e ing associat e d 
with defining an error-correcting code; 

hashing the sequence of codewords to produce a hash of the sequence of codewords; and 

authenticating a user if the hash matches a stored hash. 

21 . (Previously Presented) The method of claim 20 further comprising, prior to 
authenticating, retrieving a stored hash. 

22. (Previously Presented) The method of claim 20 further comprising, prior to 
authenticating, transmitting the hash to an authentication device. 

23. (Original) The method of claim 20 wherein each input value in the sequence of 
input values is a binary value of fixed length. 

24. (Original) The method of claim 20 wherein a discrete graphical choice in the 
sequence of discrete graphical choices comprises a selected region on the graphical interface. 

25. (Original) The method of claim 20 wherein a discrete graphical choice in the 
sequence of discrete graphical choices comprises a selected point on the graphical interface. 

26. (Original) The method of claim 25 further comprising displaying an image on the 
graphical interface after receiving the selected point on the graphical interface, wherein each 
discrete graphical choice in the sequence of discrete graphical choices is associated with one of a 
plurality of images. 

27. (Original) The method of claim 25 further comprising associating an icon from a 
plurality of icons with a point on the graphical interface by displaying the icon when the point is 
highlighted. 

28. (Original) The method of claim 20 wherein the graphical interface displays a fractal 

image. 
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29. (Original) The method of claim 20 wherein a discrete graphical choice in the 
sequence of discrete graphical choices comprises a selected icon from a plurality of icons on the 
graphical interface. 

30. (Original) The method of claim 29 wherein the icon on the graphical interface 
represents a face. 

3 1 . (Previously Presented) The method of claim 20 further comprising allowing access 
to a resource in response to authenticating the user. 

32. (Previously Presented) The method of claim 31 wherein allowing access to the 
resource comprises allowing access to at least one of a hardware device, a computer system, a 
portable computer, a software application, a database, and a physical location. 

Claims 33-38 (Canceled) 

39. (Previously Presented) An apparatus for establishing a secret to authenticate a user, 
the apparatus comprising: 

a graphical interface capable of receiving graphical input, the graphical interface 
receiving a secret pattern as graphical input, the secret pattern comprising a sequence of discrete 
graphical choices; 

a converter in signal communication with the graphical interface, the converter 
converting each discrete graphical choice in the sequence of discrete graphical choices into a 
value to produce a sequence of values, wherein the sequence of values corresponds to the 
sequence of discrete graphical choices; 

a codeword generator in signal communication with the converter, the codeword 
generator producing a sequence of codewords by applying a decoding function of an error 
correcting code to the sequence of values; 

an offset calculator in signal communication with the codeword generator, the offset 
calculator calculating an offset between each value in the sequence of values and the 
corresponding codeword in the sequence of codewords to generate a sequence of offsets; and 

a hasher in signal communication with the codeword generator, the hasher applying a 
hash function to the sequence of codewords to produce a hash of the sequence of codewords. 
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40. (Original) The apparatus of claim 39 wherein a discrete graphical choice in the 
sequence of discrete graphical choices comprises a selected point on the graphical interface. 

41 . (Original) The apparatus of claim 40 further comprising a point generator in signal 
communication with the graphical interface, the point generator highlighting a plurality of points 
on the graphical interface as alternative graphical choices for each discrete graphical choice in 
the sequence of discrete graphical choices. 

42. (Original) The apparatus of claim 41 further comprising a memory element in signal 
communication with the graphical interface, the memory element containing a plurality of 
images and a sequence of images, wherein receiving a discrete graphical choice in the sequence 
of discrete graphical choices triggers the graphical interface to display the next image in the 
sequence of images from the plurality of images contained in the memory element. 

43. (Original) The apparatus of claim 42 further comprising: 

a training logic element in signal communication with the graphical interface, the 
training logic element prompting a user to enter a match pattern upon receiving the secret pattern 
by causing the graphical interface to display the first image in the sequence of images, wherein 
the match pattern is a sequence of match points; and 

a comparator in signal communication with the graphical interface, the comparator 
comparing the match pattern to the secret pattern. 

44. (Original) The apparatus of claim 43 wherein the training logic element, during or 
after receiving a match point in the sequence of match points on the graphical interface, causes 
the graphical interface to highlight the selected point associated with the image on the graphical 
interface. 

45. (Original) The apparatus of claim 43 wherein the training logic element, during or 
after receiving a match point in the sequence of match points on the graphical interface, causes 
the graphical interface to display a line from the match point to the selected point associated with 
the image on the graphical interface. 
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46. (Original) The apparatus of claim 39 further comprising a memory element in signal 
communication with the offset calculator, the memory element storing the sequence of offsets 
from the offset calculator for use in authenticating a user. 

47. (Original) The apparatus of claim 39 wherein the memory element is in signal 
communication with the hasher, the memory element storing the hash of the sequence of 
codewords from the hasher for use in authenticating a user. 

48. (Previously Presented) An apparatus for authenticating a user, the apparatus 
comprising: 

a graphical interface capable of receiving graphical input, the graphical interface 
receiving an input pattern as graphical input, the input pattern comprising a sequence of discrete 
graphical choices; 

a converter in signal communication with the graphical interface, the converter 
converting each discrete graphical choice in the sequence of discrete graphical choices into an 
input value to produce a sequence of input values, wherein the sequence of input values 
corresponds to the sequence of discrete graphical choices; 

a memory element in signal communication with a summer, the memory element 
containing a sequence of offsets; 

the summer in signal communication with the converter and the memory element, the 
summer summing each input value from the sequence of input values with the corresponding 
offset from the sequence of offsets to generate a sequence of intermediate values; 

a codeword generator in signal communication with the summer, the codeword generator 
producing a sequence of codewords by applying a decoding function of an error correcting code 
to the sequence of intermediate values; and 

a hasher in signal communication with the codeword generator, the hasher applying a 
hash function to the sequence of codewords to produce a hash of the sequence of codewords for 
use in authenticating a user. 

49. (Original) The apparatus of claim 48 further comprising a comparator in signal 
communication with the hasher, the comparator comparing the hash of the sequence of 
codewords to a stored hash and producing an authentication signal if the hash of the sequence of 
codewords matches the stored hash. 
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50. (Original) The apparatus of claim 49 wherein the authentication signal enables 
access to a resource. 

5 1 . (Original) The apparatus of claim 50 wherein the authentication signal enables 
access to at least one of a hardware device, a computer system, a portable computer, a software 
application, a database, and a physical location. 

52. (Original) The apparatus of claim 48 further comprising a communication system in 
signal communication with the hasher, the communication system transmitting the hash of the 
sequence of codewords to an authentication device and receiving an authentication signal from 
the authentication device if the hash of the sequence of codewords matches the stored hash. 

53. (Original) The apparatus of claim 48 wherein a discrete graphical choice in the 
sequence of discrete graphical choices comprises a selected region on the graphical interface. 

54. (Original) The apparatus of claim 48 wherein a discrete graphical choice in the 
sequence of discrete graphical choices comprises a selected point on the graphical interface. 

55. (Original) The apparatus of claim 48 further comprising a logic element in signal 
communication with the graphical interface, the logic element causing the graphical interface to 
display a new image in response to the graphical interface receiving a discrete graphical choice 
from the sequence of discrete graphical choices, wherein the sequence of discrete graphical 
choices corresponds to a sequence of images. 

56. (Original) The apparatus of claim 48 further comprising a logic element in signal 
communication with the graphical interface, the logic element causing the graphical interface to 
display at least one memory cue in response to a point on the graphical interface being 
highlighted. 

57. (Original) The apparatus of claim 56 wherein the logic element causes a first icon 
from a plurality of icons to be displayed on the graphical interface in response to a first point on 
the image on the graphical interface being highlighted; and wherein the logic element causes a 
second icon from the plurality of icons to be displayed on the graphical interface in response to a 
second point on the image on the graphical interface being highlighted. 
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58. (Original) The apparatus of claim 48 wherein a discrete graphical choice in the 
sequence of discrete graphical choices comprises a selected icon from a plurality of icons 
displayed on the graphical interface. 

59. (Currently Amended) A method for generating a cryptographic secret from a visual 
password, the method comprising the steps of: 

receiving a secret pattern on a graphical interface, wherein the secret pattern comprises a 
sequence of discrete graphical choices; 

converting each discrete graphical choice in the sequence of discrete graphical choices 
into a value to produce a sequence of values, wherein the sequence of values corresponds to the 
sequence of discrete graphical choices; 

for the sequence of values, selecting a codewords from a plurality of codewords to 
generate a sequence of codewords, the plurality of codewords b e ing associat e d with defining an 
error-correcting code; and 

manipulating the sequence of codewords to produce a cryptographic secret ; and 

calculating an offset between each value in the sequence of values and the corresponding 
codeword in the sequence of codewords to generate a sequence of offsets for use in re- 
generating the secret . 

60. (Canceled). 

61 . (Previously Presented) The method of claim 59 wherein selecting comprises 
applying a decoding function of an error-correcting code to the sequence of values to generate a 
sequence of codewords. 

62. (Previously Presented) The method of claim 59 wherein manipulating comprises 
applying a hash function to the sequence of codewords. 

63. (Original) The method of claim 59 further comprising using the cryptographic secret 
as an encryption key. 

64. (Original) The method of claim 59 further comprising using the cryptographic secret 
in a digital signature algorithm or an identification algorithm. 
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65. (Canceled). 

66. (Previously Presented) The method of claim 9 wherein selecting codewords from 
the plurality of codewords involves for each value in the sequence of values selecting a 
corresponding codeword from the plurality of codewords to generate the sequence of codewords. 

67. (Previously Presented) The method of claim 20 wherein selecting codewords form 
the plurality of codewords involves for each value in the sequence of intermediate values 
selecting a corresponding codeword from the plurality of codewords to generate the sequence of 
codewords, 

68. (Canceled). 

69. (Previously Presented) The apparatus of claim 39 wherein the codeword generator is 
adapted to produce the sequence of codewords by applying the decoding function to each value 
in the sequence of values. 

70. (Previously Presented) The apparatus of claim 48 wherein the codeword generator is 
adapted to produce the sequence of codewords by applying the decoding function to each 
intermediate value in the sequence of intermediate values. 

71 . (Previously Presented) The method of claim 59 wherein selecting codewords from 
the plurality of codewords involves for each value in the sequence of values selecting a 
corresponding codeword from the plurality of codewords to generate the sequence of 
codewords. 
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